This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft File: haTP570qMmoqBWITY5e3zK5eW3w.mft (raw, json) Hash identifier: BD/jvKiQiSyPsBj2Ss7dLuaiJ2afV1N4IZQBxFJLm3o= Subject key identifier: 3A:1B:F9:B7:9A:AD:DD:E0:5A:BE:7E:0A:99:FB:6D:30:1A:46:CB:33 Authority key identifier: 85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C Certificate issuer: /CN=A912B666/serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft Manifest number: 24 Signing time: Sat 17 Jan 2026 06:49:49 +0000 Manifest this update: Sat 17 Jan 2026 06:49:49 +0000 Manifest next update: Sat 24 Jan 2026 06:49:49 +0000 Files and hashes: 1: haTP570qMmoqBWITY5e3zK5eW3w.crl (hash: hQwTDGYuvcOdUQpkcCh3ufL41QPLEGhU3auEGey4lig=) 2: AED2D108D1FE11F0A9446F52C4F9AE02.roa (hash: GRhyBTXpwNjfO8wi83PzGPSnR0pSaq7pbu0oY0AhnqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B666, serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C Validity Not Before: Jan 17 06:49:49 2026 GMT Not After : Jan 24 06:49:49 2026 GMT Subject: CN=696b310d-5b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:78:32:b4:ed:b6:15:cb:fa:f6:fa:e1:cb: 4f:40:48:9d:f3:e8:3c:f6:6c:05:38:40:40:64:44: e7:86:bb:cb:a2:14:2d:6c:f2:1e:56:5d:59:f8:ee: 51:08:de:d5:c9:c2:80:d7:03:e2:b5:65:42:2f:14: d7:97:63:70:94:23:05:3c:5a:cb:30:91:1a:38:da: 9d:64:b7:f6:07:f5:61:d8:5f:2f:44:c5:0d:01:fa: e5:78:6d:d3:01:c0:f8:ed:65:93:50:34:75:21:8e: 04:79:5f:ee:60:46:60:80:65:0b:08:c2:f7:bd:b0: 3d:97:67:0c:10:75:1d:22:67:62:58:98:e8:eb:de: f0:e0:22:8a:df:1d:ce:63:3b:9b:45:a3:ad:9e:68: f3:8c:6d:56:d7:dd:6c:25:0e:4f:24:0a:8f:fb:0c: 65:4d:ba:8f:7e:dc:2b:ba:43:31:3c:e3:9d:fb:d9: 61:6d:c8:cb:77:2a:0b:bd:42:1e:65:df:a8:d5:ab: 83:90:27:0d:8d:5c:e1:6d:6c:c3:d9:11:97:f4:1a: 95:b3:52:24:a1:bf:b6:a0:96:03:88:28:ee:95:08: e4:1b:8b:26:30:47:00:0d:c8:de:2d:72:43:58:e7: ec:2c:ad:87:77:93:e6:71:f4:d3:01:0f:e5:73:ae: ec:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1B:F9:B7:9A:AD:DD:E0:5A:BE:7E:0A:99:FB:6D:30:1A:46:CB:33 X509v3 Authority Key Identifier: keyid:85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:cc:00:09:c1:04:01:65:e7:58:53:bb:f3:3d:54:f2:43:85: c3:82:6a:db:2e:f3:1c:ff:c3:2c:da:17:3d:c5:d4:99:81:1f: 1d:dd:84:8b:9c:ef:48:5f:74:15:d1:8d:3b:b3:a0:44:26:16: d8:64:52:b2:dd:f4:e4:7c:04:a7:1d:2d:02:2d:76:4b:28:6d: a1:b3:78:e4:01:d8:b3:6d:c7:7e:41:ca:97:4e:51:a6:8d:03: 25:3f:cd:93:1a:cf:1f:3c:d1:f2:05:10:36:9a:59:90:d0:fb: 75:ef:bf:98:7b:df:2f:90:1c:1a:6c:36:bb:db:e2:da:76:61: 22:01:02:12:a8:10:53:0f:e7:a8:90:76:ce:9e:b5:35:31:fe: fb:40:9a:3b:a3:ea:5e:77:bb:2a:ad:15:a0:d9:6f:3f:49:f2: 06:e2:16:79:1f:7a:e9:88:47:b0:24:49:00:16:b8:e3:19:f3: 90:9e:37:02:9a:4b:0a:c1:79:59:44:6e:4f:c0:3c:20:19:f8: 30:f5:00:37:34:49:55:c0:87:4c:11:74:3a:9e:7d:8b:e0:9a: 37:9d:20:03:b0:7a:4a:d5:3a:7b:17:f5:05:2f:1e:d3:8d:d1: 30:c8:30:11:1a:79:76:63:d1:05:69:29:58:9c:48:d9:57:e4: be:e3:c0:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjY2NjExMC8GA1UEBRMoODVBNENGRTdCRDJBMzI2QTJBMDU2MjEzNjM5N0I3Q0NB RTVFNUI3QzAeFw0yNjAxMTcwNjQ5NDlaFw0yNjAxMjQwNjQ5NDlaMBgxFjAUBgNV BAMMDTY5NmIzMTBkLTViNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzP3gytO22Fcv69vrhy09ASJ3z6Dz2bAU4QEBkROeGu8uiFC1s8h5WXVn47lEI 3tXJwoDXA+K1ZUIvFNeXY3CUIwU8WsswkRo42p1kt/YH9WHYXy9ExQ0B+uV4bdMB wPjtZZNQNHUhjgR5X+5gRmCAZQsIwve9sD2XZwwQdR0iZ2JYmOjr3vDgIorfHc5j O5tFo62eaPOMbVbX3WwlDk8kCo/7DGVNuo9+3Cu6QzE845372WFtyMt3Kgu9Qh5l 36jVq4OQJw2NXOFtbMPZEZf0GpWzUiShv7aglgOIKO6VCOQbiyYwRwANyN4tckNY 5+wsrYd3k+Zx9NMBD+VzruyRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOhv5t5qt 3eBavn4KmfttMBpGyzMwHwYDVR0jBBgwFoAUhaTP570qMmoqBWITY5e3zK5eW3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNjY2LzkwNUJGRUY4Qzky OTExRjA4MDlDRjI4MUM0RjlBRTAyL2hhVFA1NzBxTW1vcUJXSVRZNWUzeks1ZVcz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaGFUUDU3MHFNbW9xQldJVFk1ZTN6SzVlVzN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NjY2LzkwNUJGRUY4QzkyOTExRjA4MDlDRjI4MUM0RjlBRTAyL2hhVFA1NzBxTW1v cUJXSVRZNWUzeks1ZVczdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABbMAAnBBAFl51hTu/M9VPJDhcOCatsu8xz/wyzaFz3F1JmBHx3dhIuc 70hfdBXRjTuzoEQmFthkUrLd9OR8BKcdLQItdksobaGzeOQB2LNtx35BypdOUaaN AyU/zZMazx880fIFEDaaWZDQ+3Xvv5h73y+QHBpsNrvb4tp2YSIBAhKoEFMP56iQ ds6etTUx/vtAmjuj6l53uyqtFaDZbz9J8gbiFnkfeumIR7AkSQAWuOMZ85CeNwKa SwrBeVlEbk/APCAZ+DD1ADc0SVXAh0wRdDqefYvgmjedIAOwekrVOnsX9QUvHtON 0TDIMBEaeXZj0QVpKVicSNlX5L7jwPw= -----END CERTIFICATE-----Generated at Sun Jan 18 02:57:55 2026 by rpki-client